Scope and roles
This policy explains how CenterChat ("CenterChat", "we", "us") handles personal information through the CenterChat website, workspace, support-plan form, and customer-assistant widgets.
For account, website, and direct support information, CenterChat acts as the organization deciding why the information is used. For conversations and leads collected through a workspace owner's assistant, that workspace owner generally decides the purpose and CenterChat processes the information on its behalf. Widget visitors should review the deploying business's own privacy notice and contact that business first about a conversation.
Information we handle
We handle information that you provide, information generated when the service runs, and limited technical information needed to secure it.
- Account and profile: name, email address, authentication records, organization details, website, and account preferences.
- Workspace content: assistant configuration, approved knowledge sources, instructions, test cases, feedback, actions, and deployment settings.
- Conversations and leads: visitor messages, assistant and operator replies, contact details voluntarily submitted, handoff details, ratings, and conversation status.
- Support requests: name, work email, company, website, requested capacity, and selected services.
- Operations and security: timestamps, provider and model choice, response latency, fallback state, rate-limit data, request origin, failure details, and admin audit records.
Operational analytics uses an allowlist of metadata and does not copy prompts or conversation text into analytics-event metadata. Conversation content remains in the conversation records so workspace owners can review and manage it.
Why we use information
We use information to create and secure accounts; provide, personalize, and operate assistants; retrieve approved knowledge; generate and deliver replies; enforce limits; support human handoff; process support-plan requests; send service communications; diagnose failures; prevent abuse; improve reliability; and meet legal obligations.
Depending on the context and applicable law, processing may be necessary to perform a contract, respond before entering a contract, pursue legitimate interests such as service security and improvement, comply with law, or act with consent where consent is required. Workspace owners are responsible for establishing an appropriate basis and notice for information they collect through their assistants.
AI processing
CenterChat is an AI-assisted service. To produce a reply, the selected AI provider may receive the visitor's message, recent conversation context, assistant instructions, business profile, and relevant excerpts from approved knowledge sources. The provider may be OpenAI, Google Gemini, or a configured route through Vercel AI Gateway.
AI replies can be inaccurate. Workspace owners should test assistants, keep source information current, configure human escalation, and use human review for consequential or sensitive decisions. Visitors should not submit passwords, payment-card data, government identifiers, API keys, security codes, or unnecessary sensitive information.
Payments and billing
Paid plans are sold by Lemon Squeezy as merchant of record. Lemon Squeezy collects your payment details, billing address and tax information under its own privacy policy. CenterChat never receives or stores full card numbers.
When you buy a plan, CenterChat receives and keeps the information needed to apply it to your workspace: your name and email address, the plan purchased, order and subscription identifiers, amount, currency, renewal and end dates, and payment status. We use this to activate and manage your plan, prevent fraud and payment abuse, provide support and meet accounting obligations. Our copy is deleted with your account; Lemon Squeezy keeps its own transaction records for as long as tax and financial law requires.
Retention and deletion
Workspace owners choose a conversation-retention period of 30, 90, 180, or 365 days; 90 days is the default. A scheduled process deletes conversations older than that setting. Deleting a conversation also removes its related messages, leads, handoffs, and action records through the product's relational deletion rules.
Account and workspace information is kept while the account is active and for as long as reasonably needed for security, support, legal, or recordkeeping purposes. Owners can delete individual conversations, delete all conversations, export workspace data, or delete the account from Settings. Backup or provider copies may persist for a limited period under provider recovery and legal-retention practices.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to withdraw consent where processing relies on consent. Workspace owners can use the export and deletion controls in Settings.
For information submitted to another business's assistant, contact that business first because it controls the conversation. For CenterChat account or direct support information, use the contact below. We may verify a request before acting and may retain information where law permits or requires it. You may also have the right to complain to your local data-protection authority.
Security and international transfers
We use access controls, server-side credentials, origin restrictions, signed widget sessions, rate limiting, audit records, and data-minimization practices designed to protect information. No internet service can guarantee absolute security, so workspace owners should avoid uploading unnecessary confidential or regulated data.
Our providers may process information in countries other than yours. Where required, the responsible party should use an approved transfer mechanism and any additional safeguards appropriate to the information and destination.
Children and policy changes
CenterChat is a business service and is not directed to children under 18. Workspace owners must not intentionally use it to collect children's personal information unless they have established all notices, permissions, safeguards, and provider terms required by law.
We may update this policy as the product or law changes. Material updates will be reflected by a revised effective date and, where appropriate, an additional notice in the service.
Questions about this policy?
Ask the team that runs CenterChat.